]>
git.ipfire.org Git - thirdparty/gnutls.git/log
Ludovic Courtès [Sun, 27 Feb 2011 16:59:39 +0000 (17:59 +0100)]
Avoid hard-coded /usr/bin/perl (trick taken from Gnulib.)
Ludovic Courtès [Sun, 27 Feb 2011 16:45:55 +0000 (17:45 +0100)]
Fix LZO-enabled builds.
Nikos Mavrogiannopoulos [Thu, 24 Feb 2011 16:19:29 +0000 (17:19 +0100)]
Detect fork() in the random number generator and reseed.
Nikos Mavrogiannopoulos [Wed, 23 Feb 2011 20:25:10 +0000 (21:25 +0100)]
use timeouts closer to DTLS RFC.
Nikos Mavrogiannopoulos [Wed, 23 Feb 2011 17:51:48 +0000 (18:51 +0100)]
Renamed gnutls_transport_set_push_function2() to gnutls_transport_set_vec_push_function().
Simon Josefsson [Sun, 20 Feb 2011 19:59:56 +0000 (20:59 +0100)]
Remove gnutls_x509_crq_get_preferred_hash_algorithm.
Simon Josefsson [Sun, 20 Feb 2011 19:43:05 +0000 (20:43 +0100)]
Remove dropped functions.
Simon Josefsson [Sun, 20 Feb 2011 19:44:52 +0000 (20:44 +0100)]
Add deprecated docstring.
Simon Josefsson [Sun, 20 Feb 2011 19:45:48 +0000 (20:45 +0100)]
Fix deprecated docstring.
Simon Josefsson [Sun, 20 Feb 2011 19:48:05 +0000 (20:48 +0100)]
Fix docstring.
Simon Josefsson [Sun, 20 Feb 2011 18:44:15 +0000 (19:44 +0100)]
Fix docstring of new function.
Simon Josefsson [Sun, 20 Feb 2011 18:55:53 +0000 (19:55 +0100)]
Fix docstring for deprecated functions.
Simon Josefsson [Sun, 20 Feb 2011 18:39:59 +0000 (19:39 +0100)]
Make it build.
Simon Josefsson [Sun, 20 Feb 2011 18:40:30 +0000 (19:40 +0100)]
Fix docstring of deprecated function.
Simon Josefsson [Sun, 20 Feb 2011 18:42:14 +0000 (19:42 +0100)]
Fix docstrinf of new function.
Simon Josefsson [Sun, 20 Feb 2011 18:42:32 +0000 (19:42 +0100)]
Fix typo.
Simon Josefsson [Sun, 20 Feb 2011 18:42:58 +0000 (19:42 +0100)]
Improve text.
Simon Josefsson [Sun, 20 Feb 2011 18:37:49 +0000 (19:37 +0100)]
Doc fix of new function.
Simon Josefsson [Sun, 20 Feb 2011 18:07:51 +0000 (19:07 +0100)]
Fix docstring of deprecated functions.
Simon Josefsson [Sun, 20 Feb 2011 18:30:02 +0000 (19:30 +0100)]
Rename gnutls_privkey_sign_data2 to gnutls_privkey_sign_data and gnutls_privkey_sign_hash2 to gnutls_privkey_sign_hash.
These were added during the 2.11 cycle where we don't promise ABI
compatibility.
Simon Josefsson [Sun, 20 Feb 2011 16:34:52 +0000 (17:34 +0100)]
Add doc/gnutls-crypto-layers.eps.
Simon Josefsson [Sun, 20 Feb 2011 16:34:15 +0000 (17:34 +0100)]
Dist gnutls-crypto-layers.*.
Simon Josefsson [Sun, 20 Feb 2011 16:29:35 +0000 (17:29 +0100)]
Add abstract_int.h.
Simon Josefsson [Sun, 20 Feb 2011 15:42:31 +0000 (16:42 +0100)]
Ignore more.
Simon Josefsson [Sun, 20 Feb 2011 15:48:10 +0000 (16:48 +0100)]
Link with -lnettle too.
Simon Josefsson [Sun, 20 Feb 2011 15:37:22 +0000 (16:37 +0100)]
Fix syntax-check warnings.
Ludovic Courtès [Tue, 22 Feb 2011 22:23:00 +0000 (23:23 +0100)]
guile: Remove GNUTLS_A_INNER_APPLICATION_FAILURE and GNUTLS_A_INNER_APPLICATION_VERIFICATION.
Nikos Mavrogiannopoulos [Tue, 22 Feb 2011 20:55:58 +0000 (21:55 +0100)]
store entities as numbers to avoid issues in big-little endian machines.
Nikos Mavrogiannopoulos [Mon, 21 Feb 2011 23:07:15 +0000 (00:07 +0100)]
documented the DTLS sequence particularities.
Nikos Mavrogiannopoulos [Mon, 21 Feb 2011 23:01:57 +0000 (00:01 +0100)]
Added gnutls_record_recv_seq() that can return the sequence number
of the record packet, in addition to data.
Nikos Mavrogiannopoulos [Mon, 21 Feb 2011 22:34:02 +0000 (23:34 +0100)]
reorganized and simplified gnutls_recv_int(). It will discard invalid DTLS packets.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 20:52:35 +0000 (21:52 +0100)]
Discard messages that contain a different epoch than the current one.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 20:15:07 +0000 (21:15 +0100)]
renamed internal function to reflect functionality.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 20:07:29 +0000 (21:07 +0100)]
Implemented a sliding window-like thing to discard replayed packets.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 20:05:16 +0000 (21:05 +0100)]
gnutls-cli shouldn't print errors on EAGAIN and INTERRUPTED.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 19:45:32 +0000 (20:45 +0100)]
corrected uint48pp.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 16:13:41 +0000 (17:13 +0100)]
Epoch garbage collector is being run when handshake is being cleaned up.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 16:01:43 +0000 (17:01 +0100)]
skip replays in handshake packets.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 13:22:30 +0000 (14:22 +0100)]
Forbid SSL v.2 client hello in DTLS.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 13:12:07 +0000 (14:12 +0100)]
removed unneeded variables.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 13:06:39 +0000 (14:06 +0100)]
Cleanups in combination of DTLS and TLS buffers.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 11:23:16 +0000 (12:23 +0100)]
gnutls_x509_log replaced with gnutls_audit_log.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 11:11:54 +0000 (12:11 +0100)]
Return a more precise mtu unit to applications.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 11:11:52 +0000 (12:11 +0100)]
restart handshake on signals.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 10:10:14 +0000 (11:10 +0100)]
reference counting in epochs is being done using functions.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 09:55:29 +0000 (10:55 +0100)]
Added gnutls_dtls_g/set_mtu() to allow setting and getting the DTLS mtu from application.
Nikos Mavrogiannopoulos [Sun, 20 Feb 2011 09:38:33 +0000 (10:38 +0100)]
Combined DTLS buffers and normal TLS buffers.
Nikos Mavrogiannopoulos [Sat, 19 Feb 2011 15:57:44 +0000 (16:57 +0100)]
Changes to allow DTLS server side to operate. Added a simple UDP server on gnutls-serv.
Server other cleanups.
Nikos Mavrogiannopoulos [Sat, 19 Feb 2011 10:25:29 +0000 (11:25 +0100)]
Allow setting the DTLS timeouts explicitly.
Nikos Mavrogiannopoulos [Sat, 19 Feb 2011 09:10:45 +0000 (10:10 +0100)]
updated.
Nikos Mavrogiannopoulos [Fri, 18 Feb 2011 22:59:36 +0000 (23:59 +0100)]
Several updates for DTLS (client side only) to work.
Nikos Mavrogiannopoulos [Fri, 18 Feb 2011 21:37:37 +0000 (22:37 +0100)]
Increased level of opencdk debug messages.
Nikos Mavrogiannopoulos [Fri, 18 Feb 2011 10:58:34 +0000 (11:58 +0100)]
DSA keys in TLS 1.x, x<2 and SSL 3.0 use SHA-1 as hash. That is we reverted to previous gnutls behavior. That violates DSS but all implementations handle it like that.
Nikos Mavrogiannopoulos [Fri, 18 Feb 2011 10:41:11 +0000 (11:41 +0100)]
use similar API when caching messages in DTLS or TLS.
Nikos Mavrogiannopoulos [Fri, 18 Feb 2011 10:01:58 +0000 (11:01 +0100)]
corrected is_version_supported().
Nikos Mavrogiannopoulos [Fri, 18 Feb 2011 09:41:20 +0000 (10:41 +0100)]
Simplified _gnutls_recv_handshake().
Nikos Mavrogiannopoulos [Fri, 18 Feb 2011 09:06:26 +0000 (10:06 +0100)]
ciphersuites have a bit that indicates whether they are usable with DTLS or not.
Nikos Mavrogiannopoulos [Thu, 17 Feb 2011 21:57:40 +0000 (22:57 +0100)]
fix for dtls.
Jonathan Bastien-Filiatrault [Sat, 2 Oct 2010 21:13:51 +0000 (17:13 -0400)]
dtls: Add uint48 handling functions.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Sat, 2 Oct 2010 21:10:13 +0000 (17:10 -0400)]
dtls: Bring epoch choice on receive closer to the first usage.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Sat, 25 Sep 2010 01:53:26 +0000 (21:53 -0400)]
Add DTLS support to command-line client.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Fri, 17 Sep 2010 18:34:07 +0000 (14:34 -0400)]
dtls: Write epoch to sequence number.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Mon, 6 Sep 2010 05:18:54 +0000 (01:18 -0400)]
dtls: Send consistent a client_random.
This is necessary when challenged by HelloVerifiyRequest as we MUST
send the same client parameters.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Mon, 6 Sep 2010 02:52:03 +0000 (22:52 -0400)]
dtls: Limit the number of HelloVerifyRequest round trips.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Sun, 5 Sep 2010 17:02:51 +0000 (13:02 -0400)]
dtls: TEMP: Sprinkle transmits.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Sun, 5 Sep 2010 06:30:05 +0000 (02:30 -0400)]
dtls: Do HANDSHAKE_HELLO_VERIFY_REQUEST processing.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Sun, 5 Sep 2010 06:27:25 +0000 (02:27 -0400)]
dtls: Add _gnutls_recv_hello_verify_request.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Sun, 5 Sep 2010 05:33:01 +0000 (01:33 -0400)]
Decrypt using the proper sequence number.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Sun, 5 Sep 2010 05:29:57 +0000 (01:29 -0400)]
dtls: Use proper record sequence for DTLS decrypt.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Nikos Mavrogiannopoulos [Thu, 17 Feb 2011 21:47:46 +0000 (22:47 +0100)]
corrected extdatalen
Jonathan Bastien-Filiatrault [Sun, 5 Sep 2010 05:25:35 +0000 (01:25 -0400)]
dtls: Read whole datagrams.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Tue, 4 Aug 2009 01:44:51 +0000 (21:44 -0400)]
dtls: Queue outgoing handshake messages in the retransmission layer.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Tue, 4 Aug 2009 01:44:24 +0000 (21:44 -0400)]
Add outgoing flight buffer handling code.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Tue, 4 Aug 2009 01:43:17 +0000 (21:43 -0400)]
Define _gnutls_dtls_log for DTLS.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Tue, 4 Aug 2009 01:42:21 +0000 (21:42 -0400)]
Add structures for the buffered outgoing flight.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Tue, 4 Aug 2009 01:38:51 +0000 (21:38 -0400)]
Add state for handshake mtu.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Mon, 3 Aug 2009 19:11:23 +0000 (15:11 -0400)]
dtls: Fixup outgoing ClientHello hashing.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Mon, 3 Aug 2009 19:10:27 +0000 (15:10 -0400)]
Add proper handshake outgoing sequence number.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Mon, 3 Aug 2009 19:08:58 +0000 (15:08 -0400)]
Add gnutls_dtls.{c,h}.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Sun, 2 Aug 2009 23:00:08 +0000 (19:00 -0400)]
dtls: Remove unsuitable ciphers.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Tue, 28 Jul 2009 16:03:17 +0000 (12:03 -0400)]
dtls: Add hanshake fragment headers when sending handshake.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Tue, 28 Jul 2009 15:50:56 +0000 (11:50 -0400)]
dtls: Add epoch and sequence number to DTLS packets.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Tue, 28 Jul 2009 15:51:58 +0000 (11:51 -0400)]
Use increment functions for sequence number.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Tue, 28 Jul 2009 01:47:55 +0000 (21:47 -0400)]
dtls: Add types and operations required for the DTLS epoch and sequence.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Wed, 29 Jul 2009 23:26:21 +0000 (19:26 -0400)]
Make version lookup transport dependent.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Mon, 3 Aug 2009 17:19:41 +0000 (13:19 -0400)]
dtls: Add _gnutls_is_dtls to check if a session uses DTLS.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Sat, 25 Jul 2009 23:58:22 +0000 (19:58 -0400)]
Add gnutls_init_dtls function.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Sat, 25 Jul 2009 23:54:27 +0000 (19:54 -0400)]
Add DTLS state.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Wed, 15 Jul 2009 23:48:33 +0000 (19:48 -0400)]
Add DTLS1.0 protocol entry.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Sat, 18 Sep 2010 00:33:38 +0000 (20:33 -0400)]
Allocate session buffers of size, depending on type of session.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Sat, 25 Sep 2010 16:43:03 +0000 (12:43 -0400)]
Harmonize "d" argument between constate.c and compress.c.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Sat, 25 Sep 2010 01:59:05 +0000 (21:59 -0400)]
Fix typo.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Jonathan Bastien-Filiatrault [Tue, 21 Sep 2010 20:14:55 +0000 (16:14 -0400)]
Parenthesize UINT64DATA again.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Nikos Mavrogiannopoulos [Wed, 16 Feb 2011 19:54:36 +0000 (20:54 +0100)]
reorganization of ciphersuite discussion.
Nikos Mavrogiannopoulos [Tue, 15 Feb 2011 22:13:25 +0000 (23:13 +0100)]
Allow using the minus "-" in the -ALL priority strings.
Nikos Mavrogiannopoulos [Tue, 15 Feb 2011 21:29:16 +0000 (22:29 +0100)]
Added fixme note on TLS 1.2 PRF per ciphersuite.
Nikos Mavrogiannopoulos [Tue, 15 Feb 2011 21:21:40 +0000 (22:21 +0100)]
The safe renegotiation ciphersuite is not required to be registered.
Nikos Mavrogiannopoulos [Tue, 15 Feb 2011 21:15:05 +0000 (22:15 +0100)]
Corrected bug in DHE-PSK in freeing username/key.
Nikos Mavrogiannopoulos [Tue, 15 Feb 2011 21:02:53 +0000 (22:02 +0100)]
Added ciphersuites (from RFC5487):
TLS_PSK_WITH_AES_128_GCM_SHA256
TLS_DHE_PSK_WITH_AES_128_GCM_SHA256
TLS_PSK_WITH_AES_128_CBC_SHA256
TLS_DHE_PSK_WITH_AES_128_CBC_SHA256
TLS_PSK_WITH_NULL_SHA256
TLS_DHE_PSK_WITH_NULL_SHA256
Nikos Mavrogiannopoulos [Fri, 11 Feb 2011 23:05:31 +0000 (00:05 +0100)]
Corrected signature generation and verification
in the Certificate Verify message when in TLS 1.2. Reported
by Todd A. Ouska.